$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft File: nmoKpDnP40ewT3RoQKbkNMUJsac.mft (raw, json) Hash identifier: EvR5J97l5YHjidHtEIbYYlcuqZ4L+8ysYePnkFasoc4= Subject key identifier: B0:A3:04:81:1A:1C:94:75:12:01:C2:0A:9E:BD:9E:66:94:44:06:40 Authority key identifier: 9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 Certificate issuer: /CN=A914DC56/serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft Manifest number: 0168 Signing time: Fri 05 Sep 2025 04:16:10 +0000 Manifest this update: Fri 05 Sep 2025 04:16:09 +0000 Manifest next update: Fri 12 Sep 2025 04:16:09 +0000 Files and hashes: 1: nmoKpDnP40ewT3RoQKbkNMUJsac.crl (hash: pQ6QteEcpNiPvY5iAJFRpFU0Ma1zeHG1OI7EE3cT/3g=) 2: 11A843B467D811EEA0543B5CC4F9AE02.roa (hash: JGrxdfcTXN7WXmiB33mKDnWSPFdrh+A/TvrelqjBL5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC56, serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7 Validity Not Before: Sep 5 04:16:09 2025 GMT Not After : Sep 12 04:16:09 2025 GMT Subject: CN=68ba6409-ee51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:58:59:8a:a3:be:a1:7e:e6:26:b5:18:24:84: b2:dc:66:34:5a:f1:35:bb:c5:23:71:bb:17:d9:c2: 50:a5:fb:31:6e:2f:c5:04:1c:10:07:99:1f:2c:c8: 3a:1c:dc:ca:6a:68:a1:93:d8:f9:ae:39:d4:91:24: 82:0e:93:a9:6a:6c:1d:c6:d9:45:d0:a0:01:c6:51: 4a:c4:6e:d7:b4:07:28:f8:b4:39:6b:ea:f6:03:b3: a0:cd:52:00:b8:13:79:a4:e4:70:8a:67:4f:da:17: 06:d1:99:9c:f6:80:27:12:13:4a:87:79:01:0d:d4: ed:f1:dc:21:49:c0:2d:16:11:26:e8:a7:41:3e:89: e8:c4:26:f9:eb:0b:a9:ab:2c:2e:aa:c2:55:b5:56: 7c:89:81:b8:cb:ea:36:a3:95:da:55:4c:46:c3:52: 41:84:77:b3:31:58:31:db:a4:8c:89:94:53:80:1b: 74:c8:bb:61:70:73:63:51:4f:a6:f0:77:b0:ac:67: 0a:66:fe:ce:ee:e0:3a:fe:63:56:46:74:f6:2a:9e: eb:cb:24:9d:e5:e8:87:3a:55:fa:db:a9:ee:b6:f0: 6d:5d:53:cc:66:dd:4e:6f:51:8e:6a:c2:6b:f9:80: 4f:9c:8f:8f:e8:49:71:32:74:86:37:b3:cb:07:8f: 99:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A3:04:81:1A:1C:94:75:12:01:C2:0A:9E:BD:9E:66:94:44:06:40 X509v3 Authority Key Identifier: keyid:9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:e7:d2:34:9c:13:9f:e3:36:a4:d3:e2:11:d1:58:5a:4f:d0: fd:a9:bc:22:c5:e5:f2:a1:f8:7a:70:c2:76:59:30:82:fc:46: a7:17:b4:25:c3:84:5b:5d:53:a5:da:15:05:2a:f9:f7:41:68: b2:48:db:2f:3d:6f:12:5c:73:7c:96:72:31:33:f7:af:8d:b8: 45:41:0e:11:f7:4f:84:df:54:29:56:fd:fc:ff:42:49:b9:db: 98:13:4d:30:28:96:f1:6b:12:85:9f:da:0f:cc:f9:83:56:0f: 15:31:76:bf:1a:ef:44:5f:8b:16:5a:98:66:a1:8e:1e:ca:01: ce:0f:8c:1b:e8:a8:fa:1f:89:d7:0a:da:6b:12:d7:f5:26:9b: 3d:38:25:9b:42:fa:5e:c0:5a:c1:61:dc:24:c7:28:32:3d:8b: 2b:01:55:11:c6:80:4d:f7:3f:17:cf:34:f8:f4:65:cc:aa:f7: d9:4d:10:8d:3b:24:65:00:13:cd:6b:ff:5e:cd:a0:83:ce:59: 2e:c6:35:dc:9f:a4:aa:26:d0:da:e3:94:62:66:ce:d6:ad:51: 06:96:71:17:47:8c:71:2e:01:8b:19:3c:bb:c3:5d:95:d2:06: 98:7d:7e:71:91:a5:91:13:c2:ed:59:d3:17:cf:b4:bc:27:84: ee:9f:54:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNTYxMTAvBgNVBAUTKDlFNkEwQUE0MzlDRkUzNDdCMDRGNzQ2ODQwQTZFNDM0 QzUwOUIxQTcwHhcNMjUwOTA1MDQxNjA5WhcNMjUwOTEyMDQxNjA5WjAYMRYwFAYD VQQDEw02OGJhNjQwOS1lZTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3VhZiqO+oX7mJrUYJISy3GY0WvE1u8UjcbsX2cJQpfsxbi/FBBwQB5kfLMg6 HNzKamihk9j5rjnUkSSCDpOpamwdxtlF0KABxlFKxG7XtAco+LQ5a+r2A7OgzVIA uBN5pORwimdP2hcG0Zmc9oAnEhNKh3kBDdTt8dwhScAtFhEm6KdBPonoxCb56wup qywuqsJVtVZ8iYG4y+o2o5XaVUxGw1JBhHezMVgx26SMiZRTgBt0yLthcHNjUU+m 8HewrGcKZv7O7uA6/mNWRnT2Kp7ryySd5eiHOlX626nutvBtXVPMZt1Ob1GOasJr +YBPnI+P6ElxMnSGN7PLB4+Z6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCjBIEa HJR1EgHCCp69nmaURAZAMB8GA1UdIwQYMBaAFJ5qCqQ5z+NHsE90aECm5DTFCbGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1Ni9DREJDRjYzQTY2 OTMxMUVFOThDRUFBNTBDNEY5QUUwMi9ubW9LcERuUDQwZXdUM1JvUUtia05NVUpz YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tb0twRG5QNDBld1QzUm9RS2JrTk1VSnNhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REM1Ni9DREJDRjYzQTY2OTMxMUVFOThDRUFBNTBDNEY5QUUwMi9ubW9LcERuUDQw ZXdUM1JvUUtia05NVUpzYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB459I0nBOf4zak0+IR0VhaT9D9qbwixeXyofh6cMJ2WTCC/EanF7Ql w4RbXVOl2hUFKvn3QWiySNsvPW8SXHN8lnIxM/evjbhFQQ4R90+E31QpVv38/0JJ uduYE00wKJbxaxKFn9oPzPmDVg8VMXa/Gu9EX4sWWphmoY4eygHOD4wb6Kj6H4nX CtprEtf1Jps9OCWbQvpewFrBYdwkxygyPYsrAVURxoBN9z8XzzT49GXMqvfZTRCN OyRlABPNa/9ezaCDzlkuxjXcn6SqJtDa45RiZs7WrVEGlnEXR4xxLgGLGTy7w12V 0gaYfX5xkaWRE8LtWdMXz7S8J4Tun1Rm -----END CERTIFICATE-----Generated at Fri Sep 5 11:30:21 2025 by rpki-client